Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UyJpbAAkvjlb7lxZXBe92NpA7gU.roa
File: UyJpbAAkvjlb7lxZXBe92NpA7gU.roa (raw, json)
Hash identifier: eAHYIn3Fe/bl1UjnF4zbJkcekSozRQaZMgceLG92dQM=
Subject key identifier: 53:22:69:6C:00:24:BE:39:5B:EE:5C:59:5C:17:BD:D8:DA:40:EE:05
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CCDF6E30FA41C7A64213F4CA1AE9CFF35
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UyJpbAAkvjlb7lxZXBe92NpA7gU.roa
Signing time: Wed 03 Jan 2024 06:15:58 +0000
ROA not before: Wed 03 Jan 2024 06:15:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54252
IP address blocks: 89.251.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cd:f6:e3:0f:a4:1c:7a:64:21:3f:4c:a1:ae:9c:ff:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 3 06:15:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5322696c0024be395bee5c595c17bdd8da40ee05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1c:f4:2b:76:6d:11:15:2e:dd:e1:03:df:bf:
b4:10:ff:2e:eb:ca:4b:1e:69:ab:4a:ce:cb:b3:a7:
36:06:82:65:e3:33:f4:78:24:87:23:44:3c:63:fd:
02:37:b0:db:2b:2d:7d:f4:a4:fd:e9:0a:b9:e6:bd:
65:c9:00:26:48:88:4f:11:56:42:88:e1:20:f6:7d:
4b:19:98:bf:2f:50:62:f4:99:bd:dd:54:e8:0e:d8:
f3:21:d7:30:5d:16:86:92:11:14:49:65:82:ed:d8:
ec:5c:b4:f8:3d:12:e5:8f:63:92:97:f1:0c:07:e5:
1f:72:e6:3e:97:be:0b:f7:1e:f3:28:4a:6b:5c:eb:
65:15:c1:c0:05:b9:f5:f1:85:74:d2:f1:f7:27:49:
4c:fa:58:a4:33:28:0d:85:47:7f:6b:47:c8:62:45:
ff:be:8c:5c:68:8b:35:bb:6e:3d:d9:79:6a:cc:87:
10:34:3b:c1:da:ee:20:a5:04:b6:3b:f5:6f:26:28:
6a:d1:05:a2:fa:c0:46:d5:01:6c:38:ce:a4:57:46:
49:ed:d4:d4:c5:99:f7:58:bf:54:95:1a:92:dd:72:
d7:32:77:9d:08:64:07:b8:71:66:73:51:c5:e1:34:
80:b8:e1:33:a0:ef:48:31:b7:6e:64:83:50:db:f7:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:69:6C:00:24:BE:39:5B:EE:5C:59:5C:17:BD:D8:DA:40:EE:05
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UyJpbAAkvjlb7lxZXBe92NpA7gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.16.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:5f:63:57:db:c6:ae:c7:6d:5b:cf:eb:a8:87:ce:7b:90:78:
50:2a:f4:eb:61:09:72:b2:71:ce:d7:c0:a3:07:3f:b4:04:58:
77:94:f6:24:5d:2e:73:b0:f1:14:fd:5b:ae:1d:fa:2d:44:e4:
42:70:b6:79:fb:fd:75:3a:da:3c:a9:c1:87:09:de:fd:0b:67:
97:7c:46:c4:7d:d4:b6:65:fa:7f:cd:b2:0a:d0:67:86:2d:60:
dd:c3:ba:4f:24:b4:18:9f:35:c0:ab:35:38:7a:db:fd:3c:0b:
de:13:79:e5:b2:56:ad:14:46:4a:1d:58:9b:5d:5a:37:b9:80:
70:d4:1d:a4:5c:4c:6f:c3:dc:66:a2:66:42:e5:0d:da:ab:7f:
68:4f:e8:a0:63:6a:41:12:d5:2e:bc:99:c4:c5:15:e1:34:28:
53:1a:e9:84:e0:8f:c0:04:44:84:88:ea:52:58:ed:fa:be:a8:
fe:66:01:a4:c2:6a:86:bf:5c:14:82:60:0a:f8:72:cb:07:3c:
00:94:0a:95:19:47:9a:5b:7e:98:34:a7:d6:3b:11:76:38:1e:
21:4c:9a:08:48:28:00:9b:8f:d4:95:32:fd:26:60:44:59:e9:
06:44:d9:ea:72:00:2f:b3:c0:57:bd:dc:0a:52:05:7d:69:a4:
53:1b:1c:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzN9uMPpBx6ZCE/TKGunP81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQwMTAzMDYxNTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzIyNjk2YzAwMjRiZTM5NWJlZTVjNTk1YzE3YmRkOGRhNDBlZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRz0K3ZtERUu3eED37+0EP8u68pL
HmmrSs7Ls6c2BoJl4zP0eCSHI0Q8Y/0CN7DbKy199KT96Qq55r1lyQAmSIhPEVZC
iOEg9n1LGZi/L1Bi9Jm93VToDtjzIdcwXRaGkhEUSWWC7djsXLT4PRLlj2OSl/EM
B+UfcuY+l74L9x7zKEprXOtlFcHABbn18YV00vH3J0lM+likMygNhUd/a0fIYkX/
voxcaIs1u2492XlqzIcQNDvB2u4gpQS2O/VvJihq0QWi+sBG1QFsOM6kV0ZJ7dTU
xZn3WL9UlRqS3XLXMnedCGQHuHFmc1HF4TSAuOEzoO9IMbduZINQ2/cbcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMiaWwAJL45W+5cWVwXvdjaQO4FMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvVXlKcGJBQWt2amxiN2x4WlhCZTkyTnBBN2dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsQMA0G
CSqGSIb3DQEBCwUAA4IBAQBLX2NX28aux21bz+uoh857kHhQKvTrYQlysnHO18Cj
Bz+0BFh3lPYkXS5zsPEU/VuuHfotRORCcLZ5+/11Oto8qcGHCd79C2eXfEbEfdS2
Zfp/zbIK0GeGLWDdw7pPJLQYnzXAqzU4etv9PAveE3nlslatFEZKHVibXVo3uYBw
1B2kXExvw9xmomZC5Q3aq39oT+igY2pBEtUuvJnExRXhNChTGumE4I/ABESEiOpS
WO36vqj+ZgGkwmqGv1wUgmAK+HLLBzwAlAqVGUeaW36YNKfWOxF2OB4hTJoISCgA
m4/UlTL9JmBEWekGRNnqcgAvs8BXvdwKUgV9aaRTGxxH
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org